1dd6c0adbb41d3915d15eac413955461d9bd0ec093177f6361fe443b5b09047a_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1dd6c0adbb41d3915d15eac413955461d9bd0ec093177f6361fe443b5b09047a_NeikiAnalytics.exe
Size

172KB
MD5

53321b4e89b0291e0d897cbed734ec60
SHA1

9cd8ef8bffd1f06c65dad751cf0f844f4f65236e
SHA256

1dd6c0adbb41d3915d15eac413955461d9bd0ec093177f6361fe443b5b09047a
SHA512

a5d4b2188a91f7c1c0659e924692717661954af3db498a627eb06b83ae1e4035f2fb277c0ac80df73661190051ccde971daedd670721464255bee2a172d7f57f
SSDEEP

3072:koXBhhpxgHnSmmnbfaAtWJP8hEYhFLObGQxy4uypaKbFf+M9PdNt7HZDr/T:kwhhIHSdrxtObGwy4ZpLFGIdN37

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dd6c0adbb41d3915d15eac413955461d9bd0ec093177f6361fe443b5b09047a_NeikiAnalytics.exe

Files

1dd6c0adbb41d3915d15eac413955461d9bd0ec093177f6361fe443b5b09047a_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

ca94fd452a9808d411b6e37c2a8447f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

ioctlsocket
inet_ntop
inet_pton
freeaddrinfo
getaddrinfo
ntohl
htonl
sendto
WSAPoll
getsockopt
recv
recvfrom
connect
socket
send
getsockname
getpeername
listen
shutdown
closesocket
bind
accept
WSAStartup
setsockopt
ntohs
htons
WSAGetLastError

kernel32

FreeLibrary
WriteConsoleW
SetEndOfFile
HeapReAlloc
HeapSize
GetFileSizeEx
ReadConsoleW
ReadFile
SetFilePointerEx
CreateFileW
GetProcessHeap
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
FlushFileBuffers
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
GetCurrentProcessId
GetCurrentThreadId
FreeConsole
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
DecodePointer
GetProcAddress
LoadLibraryExW
RaiseException
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTimeZoneInformation
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
SetStdHandle
GetConsoleOutputCP

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca94fd452a9808d411b6e37c2a8447f0

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 129KB - Virtual size: 128KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 3KB - Virtual size: 7KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 129KB - Virtual size: 128KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 3KB - Virtual size: 7KB

.reloc
Size: 6KB - Virtual size: 5KB